MEMBERSHIP CONTRACT

By using this shopping site and making a purchase, customers are considered to have agreed to the following terms:

The web pages on this site, along with all associated pages, are owned and operated by BHM Otelcilik A.Ş. Sandu Branch, accessible at www.sandu.com.tr. As a user of the site ('User'), you agree to the following terms by accessing and continuing to use the services offered: you confirm that you possess the right, authority, and legal capacity to enter into a contract under the laws applicable to you, that you are at least 18 years old, and that you have read, understood, and accepted the terms of this contract.

This contract is indefinite and establishes the rights and obligations of the parties concerning the site subject to its terms. By accepting or approving this contract, whether online or otherwise, the parties acknowledge and commit to fulfilling these rights and obligations completely, accurately, and in a timely manner, in accordance with the conditions outlined herein.

1. RESPONSIBILITIES

The Company reserves the right to modify prices and the products or services offered at any time.

The Company guarantees that members will benefit from the services specified in the contract, except in cases of technical failures.

The User agrees in advance not to reverse-engineer the site or take any action to discover or obtain its source code; otherwise, they will be held liable for damages caused to third parties, and legal and criminal proceedings will be initiated against them. and legal and criminal proceedings will be initiated against them.

The User acknowledges that they are solely responsible for any damages resulting from incomplete or incorrect information provided during the membership registration process. In the event of false information or a violation of this contract, the Company reserves the right to unilaterally terminate the user's membership without prior notice or warning.

Certain information, such as the name and Internet Protocol (IP) address of the internet service provider used by the company to access the site, the date and time of site access, the pages visited on the site, and the internet address of the website that provided a direct connection to the site, may be collected for the improvement and development of the website and/or in compliance with legal requirements. The User consents to the collection of this information.

2. INTELLECTUAL PROPERTY RIGHTS

2.1. All registered or unregistered intellectual property rights, including but not limited to titles, business names, trademarks, patents, logos, designs, information, and methods contained on this Site, belong to the site operator and owner company or the respective rights holder and are protected under national and international law. Visiting this Site or using its services does not grant any rights to the aforementioned intellectual property.

2.2. The information on the Site may not be reproduced, published, copied, displayed, or transferred in any form or by any means. No part of the Site, in whole or in part, may be used on any other website without prior permission. In the event of such a violation, the User shall be liable for any compensation claimed by the company for damages suffered by third parties, as well as for all associated obligations, including but not limited to court costs and attorney's fees.

3. CONFIDENTIAL INFORMATION

3.1. The Company will not disclose personal information provided by users through the Site to third parties. This personal information includes, but is not limited to, details that can identify the User, such as name, surname, address, telephone number, mobile phone number, and email address, collectively referred to as "Confidential Information."

3.2. The User accepts, agrees, and consents to the Company that owns the Site sharing their contact information, portfolio status, and demographic data with its affiliates or group companies for the purpose of sending electronic messages related to marketing activities, such as promotions, advertisements, campaigns, offers, and announcements. This personal information may also be used to identify customer profiles within the Company, tailor promotions and campaigns to match the customer profile, and conduct statistical analyses.

3.3.The User reserves the right to withdraw the consent provided under this contract at any time, without providing any justification. Upon receiving the revocation, the Company will process it promptly and ensure that the User ceases to receive electronic messages within three (3) business days.

3.4.Confidential Information may only be disclosed to official authorities if such disclosure is duly requested by these authorities and is mandatory under the provisions of applicable legislation.

4. NO GUARANTEES

This clause shall be enforced to the fullest extent permitted by applicable law. The services provided by the Company are offered on an "as is" and "as available" basis, without any warranties of any kind, whether express, implied, statutory, or otherwise. This includes, but is not limited to, implied warranties of merchantability, fitness for a particular purpose, or non-infringement, with respect to the services or the application (including all information contained therein).

5. REGISTRATION AND SECURITY

The User is required to provide accurate, complete, and up-to-date registration information. Failure to do so will be considered a violation of this Contract, and the account may be terminated without prior notice to the User.

The User is solely responsible for maintaining the security of their password and account on the Site and any third-party sites. The Company shall not be held liable for data loss, security breaches, or any damage to hardware or devices resulting from the User's failure to ensure such security.

6. FORCE MAJEURE

If the obligations under this Contract cannot be fulfilled by the parties due to circumstances beyond their control, such as natural disasters, fires, explosions, civil wars, wars, riots, public disturbances, declarations of mobilization, strikes, lockouts, epidemics, infrastructure and internet failures, or power outages (hereinafter collectively referred to as “Force Majeure”), the parties shall not be held liable for such non-performance. During the Force Majeure period, the rights and obligations of the parties under this Contract shall be suspended.

7. CONTRACTUAL INTEGRITY AND ENFORCEABILITY

If any term of this Contract is found to be invalid, in whole or in part, the remaining provisions shall continue to be fully enforceable and effective.

8. AMENDMENTS TO BE MADE TO THE CONTRACT

The Company reserves the right to modify the services offered on the Site and the terms of this Contract, in whole or in part, at any time. Such changes will take effect from the date they are published on the Site. It is the User's responsibility to stay informed of these changes. By continuing to use the services provided on the Site, the User is deemed to have accepted the updated terms.

9. NOTICE

All notifications related to this Contract will be sent to the parties via the Company's designated email address and the email address provided by the User in the membership form. The User agrees that the email address provided during registration is their valid notification address. In the event of a change, the User must inform the Company in writing within five (5) days. Otherwise, any notifications sent to the previously provided address will be considered valid.

10. EVIDENCE CONTRACT

In any disputes arising from this Contract, the Parties agree that their books, records, documents, computer records, and fax records shall serve as evidence under Civil Procedure Law No. 6100, and the User waives any right to contest their validity.

11. DISPUTE RESOLUTION

The Antalya (Central) Courthouse Courts and Enforcement Offices shall have jurisdiction over any disputes arising from the implementation or interpretation of this Contract.

BHM OTELCİLİK A.Ş. SANDU BRANCH

PROTECTION OF PERSONAL DATA

CUSTOMER, VISITOR AND MEMBER DISCLOSURE TEXT

Dear Guests,

At Bhm Otelcilik A.Ş. Sandu Branch, we place great importance on the protection of your personal data and handle it with the utmost care.

In line with this commitment, Bhm Otelcilik A.Ş. Sandu Branch processes your personal data as a "Data Controller," as defined under Law No. 6698 on the Protection of Personal Data (“PDPL”), strictly adhering to the purposes and methods outlined in the PDPL, within the limits established by legislation, and in compliance with data retention and destruction requirements and deadlines.

1. Your Personal Data We Process

·      Identity Information: Name, surname, date of birth, Turkish ID number, Passport number, date of birth,

·      Contact Information: Address, postal code, e-mail address, telephone number,

·      Financial Information: e-invoice information, TR ID number, tax number, private company information, detailed breakdown of expenses, bank account information, your credit card information in order to receive the payment if you want to make your payment by credit card (credit card information is transferred to the payment institution without being recorded and other payment information,

·      Physical Space Security: At Bhm Otelcilik A.Ş. taken during your visits to Bhm Otelcilik A.Ş. Sandu Branch, your entry and exit dates and information

·      Transaction Security Information: username, password, browsing information, IP address, browser information, location data obtained when you log in with your username and password during the use of our website and application,

·      Customer comments, feedback and complaint data: reviews, opinions or complaints about our website, comments and responses shared for the purpose of evaluating services, order-related information,

·      Preference information: Details about your use of the Site, (such as your behavior on the website, transactions, preferences, products visited)

·      Marketing: Shopping history, cookie records, special day information, likes and related comments in case you give permission for electronic commercial communication, campaigns utilized, information obtained as a result of surveys

2. Purpose of Processing Personal Data

·      Creating the Membership Process: Realization of the membership process, execution of the membership contract we will execute with you, entering your membership information into the system, confirming your identity and contact information,

·      Creating the Order and Fulfillment of Your Related Services: Processing of purchase date, quantity, ordered product contents and detailed payment details in order to manage and provide services for order planning and fulfillment activities, view your order history, view your shopping information and make transactions,

·      Establishing Communication and Ensuring Product Delivery: Interviews with you in order to convey your order information, provide support, convey payment information to you, plan to deliver the orders you have placed to the addresses you have specified, and ask for information about the products,

·      Evaluation of Your Requests and Comments: Measuring, increasing and researching customer satisfaction, planning and execution of customer relationship management processes, receiving and evaluating requests and complaints,

·      Fulfillment of Legal Obligations: Ensuring compliance with national and international legislation to which Bhm Otelcilik A.Ş. Sandu Branch is subject and fulfilling the obligations arising from the relevant legislation, following up and executing its legal affairs, responding to the applications of the relevant persons in accordance with the legislation and taking the necessary actions, fulfilling the requests of official institutions,

·      Execution of Accounting and Finance Processes: Carrying out finance or accounting operations, forwarding financial information or invoice to the e-mail address you specified during registration, receiving payments and making refunds if necessary, planning payment preferences,

·      Ensuring Physical Space Security: Ensuring compliance with Bhm Otelcilik A.Ş. Sandu Branch premises and/or facilities, creating and monitoring visitor records

·      Ensuring Transaction Security: Browsing information, IP address, browser information, location data obtained when you log in with your username and password during the use of our website and application,

·      Data Processing for Advertising Purposes: Your personal data may be processed, in accordance with the consent you have provided, to share information about products, promote and market goods and services, enhance brand awareness, or convey messages such as celebrations and well-wishes. In line with the permission you have given, to ensure that you are also informed about the campaigns of our business partners within Bhm Otelcilik A.Ş. Sandu Branch.

Your personal data, obtained and processed in compliance with the relevant legislation for these purposes, may be stored in the physical archives and/ or information systems of Bhm Otelcilik A.Ş. Sandu Branch and retained in both digital and physical formats.

3. To Whom and For What Purpose Your Personal Data Will Be Transferred

·      Fulfillment of Legal Obligations: To fulfill its legal obligations, our Company may share your personal data with public institutions and organizations, such as judicial authorities, the General Directorate of Security, other law enforcement agencies, and the Personal Data Protection Authority, in accordance with the Law on the Protection of Personal Data, the Law on Consumer Protection, and other applicable legal regulations.

·      Sharing with Our Lawyers: Your personal data may be shared with our legal advisors for purposes such as fulfilling legal obligations or obtaining information, provided it is limited to the relevant subject matter.

·      Our Business Partners We Are Working With: Your personal data may also be shared, within the scope of the relevant subject, with third-party service providers, such as banks and electronic payment institutions (excluding credit card information), internal operating system application providers, website management companies, service providers and business partners for marketing, advertising, and analysis activities, electronic message intermediary service providers, and cargo and courier companies.

·      Sharing with Your Authorized Legal Representative: Your personal data may be shared solely within the scope of the request and authorization of your legally authorized representative, in accordance with their legal request.

·      Use of Applications and Websites: Your personal data may also be shared with companies that process data on behalf of our company, websites and information technology servers utilized by our company and their service providers, as well as companies providing cloud computing services, when cloud computing is employed.

·      For the Realization of Audit Processes: Your personal data may be shared with audit firms, information security firms, and regulatory or supervisory institutions to facilitate necessary quality, confidentiality, and standard audits, as well as to conduct internal and external audits.

4. Method of Collection of Your Personal Data and Legal Reasons

Your personal data may be collected and processed by the relevant units of Bhm Otelcilik A.Ş. Sandu Branch, in accordance with the Law, either automatically or non-automatically, through verbal, written, or electronic means, depending on the nature of the service provided. This includes collection through physical media, order forms, communications such as interviews or messages, our mobile application, requests and communications during your shopping experience, software, various contracts, email, social media platforms, and in-house security cameras, for the purposes outlined in paragraph (2) of this text.

By the methods mentioned above;

·      Your personal data may be processed based on the legal grounds that "it is stipulated by law," "data processing is necessary for the establishment and performance of the contract," "fulfillment of legal obligations" concerning retention requirements under applicable legislation, and "data processing is mandatory for the legitimate interests of the data controller."

·      Personal data collected through security camera recordings within the company is processed under the legal grounds of "ensuring the security of the building, facilities, and premises," "fulfillment of the data controller's legal obligations," and "data processing is mandatory for the legitimate interests of the data controller, provided it does not infringe on the fundamental rights and freedoms of the data subject."

5. Scope and Amendment of the Personal Data Protection and Processing Policy

This Clarification Text, prepared by BHM Otelcilik A.Ş., has been drafted in accordance with Law No. 6698 on the Protection of Personal Data. BHM Otelcilik A.Ş. reserves the right to amend this Clarification Text on the Protection of Personal Data, provided such changes comply with the Law and board decisions, to ensure better protection of personal data.

6. Information on Commercial Electronic Messages

Pursuant to Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages, your personal data may be processed to inform you about our services, promote our goods and services, and keep you updated on our campaigns. In compliance with the relevant legislation, your commercial electronic message permissions must be recorded in the Message Management System (IYS). Accordingly, data such as your contact information (email address and/or telephone number), permission date, communication channel, recipient type, and permission source will be shared with IYS. For more detailed information about the IYS, please visit https://iys.org.tr/.

7. Your Rights Regarding the Protection of Your Personal Data

You may exercise your rights under Article 11 of the Law regarding your personal data processed by Bhm Otelcilik A.Ş. Sandu Branch by applying to us at any time. Under this article, you have the following rights:

·      “To learn whether your personal data is being processed”,

·      “To request information about the processing of your personal data”,

·      “To understand the purpose of processing your personal data and whether it is being used for its intended purpose”

·      “To know the third parties to whom your personal data is transferred, domestically or internationally”,

·      “To request the correction of your personal data in case of incomplete or incorrect processing and to request notification of such corrections to third parties to whom the data has been transferred”,

·      “To request the deletion or destruction of your personal data if the reasons for processing no longer exist, and to request notification of such actions to third parties to whom the data has been transferred,”,

·      “To object to unfavorable outcomes that may result from the processing of your personal data through automated systems”

·      “To request compensation for damages if you suffer harm due to the unlawful processing of your personal data”,

Application Method

You can submit your requests within the scope of the Law;

·      in person to Akkuyu Mah.Anadolu Cad.C Blok No:154CC Konyaaltı/Antalya by filling out the “Application Form in accordance with the Law on the Protection of Personal Data” at “https://www.sandu.com.tr”,

·      send it through a notary public,

·   send it to info@sandu.com.tr with secure electronic or mobile signature, via registered e-mail address or your electronic e-mail address registered in our system.

Depending on the nature of your request, your applications will be processed free of charge and finalized as quickly as possible, within a maximum of thirty days; however, if the transaction incurs additional costs, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board.

Please note that the request must comply with the conditions outlined in the Communiqué on the Procedures and Principles of Application to the Data Controller.